| .. |
|
allocate-memory.yml
|
*: use meta.authors everywhere
|
2022-05-26 11:56:31 -06:00 |
|
allocate-rw-memory.yml
|
*: use meta.authors everywhere
|
2022-05-26 11:56:31 -06:00 |
|
calculate-modulo-256-via-x86-assembly.yml
|
Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""
|
2022-06-28 15:23:20 -06:00 |
|
contain-loop.yml
|
*: use meta.authors everywhere
|
2022-05-26 11:56:31 -06:00 |
|
contain-pusha-popa-sequence.yml
|
*: use meta.authors everywhere
|
2022-05-26 11:56:31 -06:00 |
|
create-or-open-file.yml
|
add LZ* functions
|
2023-06-04 12:16:30 +02:00 |
|
create-or-open-registry-key.yml
|
improve rules that often match (#655)
|
2023-01-09 14:07:53 +01:00 |
|
create-or-open-section-object.yml
|
add section access/map rules (#681)
|
2023-02-02 09:11:46 +01:00 |
|
delay-execution.yml
|
Adjusted rules for the ELF BEACON sample shared by Intezer (#654)
|
2023-01-09 14:37:51 +01:00 |
|
duplicate-stdin-and-stdout.yml
|
*: use meta.authors everywhere
|
2022-05-26 11:56:31 -06:00 |
|
get-os-version.yml
|
add import
|
2023-07-02 16:23:04 +02:00 |
|
get-service-handle.yml
|
*: use meta.authors everywhere
|
2022-05-26 11:56:31 -06:00 |
|
open-process.yml
|
*: use meta.authors everywhere
|
2022-05-26 11:56:31 -06:00 |
|
open-thread.yml
|
*: use meta.authors everywhere
|
2022-05-26 11:56:31 -06:00 |
|
peb-access.yml
|
Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""
|
2022-06-28 15:23:20 -06:00 |
|
validate-payment-card-number-using-luhn-algorithm-with-lookup-table.yml
|
Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""
|
2022-06-28 15:23:20 -06:00 |
|
validate-payment-card-number-using-luhn-algorithm-with-no-lookup-table.yml
|
Revert "Revert "Merge pull request #548 from mandiant/feature-remove-flavors""
|
2022-06-28 15:23:20 -06:00 |
|
write-process-memory.yml
|
*: use meta.authors everywhere
|
2022-05-26 11:56:31 -06:00 |